# Directorate of Social and Child Welfare Institutions of the Ferencvaros District of Budapest: Insufficient fulfilment of data breach notification obligations

- Type: Enforcement
- Source: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Date: 2019-05-21
- Original: https://www.enforcementtracker.com/ETid-251
- Canonical: https://overview.legal/posts/46366
- Topics: Notification Obligation, Data Breaches, Recipient, Notified Body Reporting and Notification Obligations, Article 19 GDPR - Notification of Rectification, Erasure or Restriction, Criminal Data, Personal Data, Education, Public Authority, Public Sector

## Summary

The employee of the Directorate sent by mistake 9 letters to the wrong recipient, which contained personal data of 18 data subjects (including data of children, criminal data and data related to the private life of the data subjects). The recipient informed the Directorate by telephone 5 days after the posting that it received certain letters by mistake. The Directorate notified NAIH on the data breach only weeks later.

## Full text

The employee of the Directorate sent by mistake 9 letters to the wrong recipient, which contained personal data of 18 data subjects (including data of children, criminal data and data related to the private life of the data subjects). The recipient informed the Directorate by telephone 5 days after the posting that it received certain letters by mistake. The Directorate notified NAIH on the data breach only weeks later.

GDPR Articles: Art. 33 GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/46366 · 2026-08-22